CVE-2017-9048

Description

libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a stack-based buffer overflow. The function xmlSnprintfElementContent in valid.c is supposed to recursively dump the element content definition into a char buffer buf of size size. At the end of the routine, the function may strcat two more characters without checking whether the current strlen(buf) + 2 < size. This vulnerability causes programs that use libxml2, such as PHP, to crash.

Risk Information

Base Score

7.5

MODERATE

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS Score

Exploitation Probability

0.537

Associated Vulnerability

Vulnerability	OS Platform
Multiple Vulnerabilities are affected in IBM Security Guardium 10.0	Windows
Multiple Vulnerabilities are affected in IBM Aspera Shares 1.10.1	Windows
Multiple Vulnerabilities are affected in IBM Cognos Analytics 11.0.9.0	Windows
libxml2 security update(DSA-3952-1) libxml2_2.9.1+dfsg1-5+deb8u5_i386.deb	Linux
libxml2 security update(DSA-3952-1) libxml2_2.9.4+dfsg1-2.2+deb9u1_i386.deb	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234